Controls that detect and prevent unauthorized movement or exposure of sensitive data across systems and channels.